Firebase
Ranked 2 of 3 backend platforms by recommenders
Recommended for its free tier, easy auth and quick setup for small projects, though critics warn bills can climb steeply at scale and misconfigured keys have caused costly incidents.
Recommended for its free tier, easy auth and quick setup for small projects, though critics warn bills can climb steeply at scale and misconfigured keys have caused costly incidents.
89 people gave an opinion
- recommend it
- 26
- criticize it
- 63
- approval share
- 29%
Recommended in 12 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 26 people recommend itNeeds 10 or more, met.
- 0.4 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 12 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Built-in auth and user management
“They have a generous free tier that includes hosting and you can add real user auth, again all for free.”
Comment from 2 Aug 2026 in “Software for One” “They provide basic auth and stuff like this. So you can actually focus on writing your code.”
Comment from 15 Dec 2025 in “AI agents are starting to eat SaaS” “I would definitely go with something like firebase or auth0 vs rolling your own auth”
Comment from 26 Feb 2026 in “Reverse engineering the KakaoTalk app so I can build a Beeper Bridge” - Comment from 23 Dec 2025 in “Your Supabase is public if you turn off RLS”
Easy to set up and use
“Firebase is genuinely nicer to work with than its alternatives”
Comment from 30 May 2026 in “Let's talk about EU Sovereignty (2025)” “Both make it pretty dead simple to deploy.”
Comment from 9 Jan 2026 in “He was called a 'terrorist sympathizer.' Now his AI company is valued at $3B” “Firebase integration is absurdly easy”
Comment from 13 Aug 2026 in “What's New in Flutter 3.47” - Comment from 9 Jan 2026 in “He was called a 'terrorist sympathizer.' Now his AI company is valued at $3B”
Good for personal and simple projects
“I think they are good options for personal projects until it reaches a scale where costs really start to matter.”
Comment from 13 Jan 2026 in “Show HN: Geoguess Lite – open-source, subscription free GeoGuessr alternative” “I still reach for Firebase for my personal projects”
Comment from 20 Sep 2026 in “We need to stop using Stored Procedures” “for this kind of project it works really well”
Comment from 14 Feb 2026 in “Built and shipped an iOS app from my phone while traveling Japan” - Comment from 10 Nov 2025 in “How AWS is losing the younger generation with complexity”
What people warn about
Each mark is one comment
Surprise bills and costs at scale
“I think they are good options for personal projects until it reaches a scale where costs really start to matter.”
Comment from 13 Jan 2026 in “Show HN: Geoguess Lite – open-source, subscription free GeoGuessr alternative” “I had a Firebase charge of $1k from someone who set up an automated script”
Comment from 16 Apr 2026 in “€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs” “A lot of cloud providers have very generous free tiers to hook you and then the moment things take off , it's a small fortune to keep the servers on.”
Comment from 23 Apr 2026 in “I Am Building a Cloud” - Comment from 16 Apr 2026 in “€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs”
- Comment from 16 Apr 2026 in “€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs”
- Comment from 24 Jan 2026 in “How I Estimate Work as a Staff Software Engineer”
- Comment from 8 Oct 2026 in “Serverless Horrors $10,811.41”
Security exposure and past incidents
“Firebase was such a gold-mine for security researchers: everyone just forgot about security when they forgot about their backend.”
Comment from 22 Dec 2025 in “Your Supabase is public if you turn off RLS” “This is by far the worst security incident Google has ever had, and that's why they aren't publicly or loudly responding to it.”
Comment from 16 Apr 2026 in “€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs” “Google should know better to not have such an incident like this as the Firebase SDK runs on millions of apps.”
Comment from 29 Sep 2026 in “Firebase SDK is crashing all iOS apps since this morning” - Comment from 16 Apr 2026 in “€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs”
- Comment from 29 Sep 2026 in “Firebase SDK is crashing all iOS apps since this morning”
Lock-in and no data export
“Firebase will give you the instant database and UI, but then you're forever tied to paying them rent.”
Comment from 24 Jan 2026 in “How I Estimate Work as a Staff Software Engineer” “using firebase without export and user access to their data was ok as long as it was an experiment”
Comment from 27 Mar 2026 in “Colibri – chat platform built on the AT Protocol for communities big and small” Hard to set up permissions
“I gave up on fire base for one project because I could not figure out how to get the right permissions set up”
Comment from 24 Nov 2025 in “Nano Banana Pro” “Having client-accessible databases with optional rule-base security has always seemed a bit dumb.”
Comment from 10 Aug 2026 in “Over 181,000 AI meeting recordings left wide open in note taking app”
Other backend platforms people recommend
The two most recommended other backend platforms, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
See all 3 backend platforms, rankedWhat people said
40 of the 99 comments that mention it, newest first. Each links to the original comment.
“cuts your bill to a ~$5 VPS”
“The only available killswitch was some weird workaround with a Google Sheets monitoring the bill”
“most AI models get into the weeds of asking the user to sign up to netlify or firebase”
“Google should know better to not have such an incident like this as the Firebase SDK runs on millions of apps.”
“surely atleast 12 of those engineers tested their SDK thoroughly for a minimum of 14 continuous days”
“While Firebase has support for queries with realtime updates and offline caching, I wouldn't quite call it offline sync.”
“Especially for offline sync Firebase is still much stronger than other all-in-one solutions.”
“the identifiers which are identical and given to firebase, and various other orgs”
“I still reach for Firebase for my personal projects”
“both of which have a favorable reputation for quality in both design and implementation”
“Firebase integration is absurdly easy”
“Having client-accessible databases with optional rule-base security has always seemed a bit dumb.”
“instead of apps choosing to use Firebase for notifications”
“They have a generous free tier that includes hosting and you can add real user auth, again all for free.”
“sharding by user id or using something like Firebase”
“I created a system like mix of revenuecat and firebase”
“Firebase is genuinely nicer to work with than its alternatives”
“Google cloud is performing better(along with firebase)”
“A lot of cloud providers have very generous free tiers to hook you and then the moment things take off , it's a small fortune to keep the servers on.”
“they did not expect or imagine these keys would become valid for AI that didn't exist years down the line”
“So I can build a project I love, that does good, but somehow get in a situation where I'm accidentally paying 30.000€”
“I had a Firebase charge of $1k from someone who set up an automated script”
“A hard wall preventing going over budget by 100x in a couple hours is not some devilishly complicated decentralized system problem.”
“This is by far the worst security incident Google has ever had, and that's why they aren't publicly or loudly responding to it.”
“the Firebase backend that AI Studio would automatically use”
“using firebase without export and user access to their data was ok as long as it was an experiment”
“I would definitely go with something like firebase or auth0 vs rolling your own auth”
“for this kind of project it works really well”
“reactive backends similar to Firebase, Airtable and Zapier, which come so close to almost working for normal people”
“Firebase will give you the instant database and UI, but then you're forever tied to paying them rent.”
“I think they are good options for personal projects until it reaches a scale where costs really start to matter.”
“Both make it pretty dead simple to deploy.”
“which makes it relatively easy”
“the reason I might use firebase is Because Of the auth, not In Spite Of”
“Firebase was such a gold-mine for security researchers: everyone just forgot about security when they forgot about their backend.”
“For small companies things like vercel, supabase, firebase, ... wipe the floor with Amazon RDS.”
“They provide basic auth and stuff like this. So you can actually focus on writing your code.”
“doesn't actually solve state transfer between backend and frontend like, say, Firebase”
“I gave up on fire base for one project because I could not figure out how to get the right permissions set up”
“For simple apps, I prefer Firebase on GCP.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.